AI-Driven Defense and Incident Response
Your endpoints are watched. Your incidents are answered.
Prowl is Orel's AI-driven defense and incident response platform. It detects threats, explains them in plain language and contains them — within limits you set.
The challenge
Why this matters
Ransomware can spread across a network in minutes. Small teams cannot read every alert or react at night, and automation that acts without explaining why is too risky to switch on.
Orel Prowl
What you get
Explainable alerts
Each alert shows its rule, risk score, confidence and MITRE ATT&CK technique.
AI Analyst
Plain-language answers backed by the records behind them.
Guarded containment
Isolate a host, stop a process and collect evidence.
Incident cases
Prowl groups related alerts and tracks them from detection through containment, eradication, recovery and post-incident review.
Threat hunting
A query builder, presets, scheduled hunts and AI-suggested hunts.
Detection content
Rules with severity, confidence, versions and MITRE mapping, plus threat intelligence.
Security posture score and executive view
Coverage, mean time to detect and respond, and the risk trend.
Step by step
How it works
- 01
Observe
Agents report endpoint activity.
- 02
Detect
Rules raise explainable alerts with risk scores, mapped to MITRE ATT&CK.
- 03
Decide
Analysts or the AI Analyst review the evidence.
- 04
Contain
Prowl acts within guardrails, records everything and verifies the result.
Guardrails
You stay in control
Three autonomy levels.
Level 1
Monitor and alert
Prowl recommends and people act.
Level 2
Controlled automation
Low and medium severity actions run automatically, while high and critical actions need approval.
Level 3
Full automated response
Within policy.
- A fixed catalogue of approved playbooks
- Per-action policies (auto, approval or disabled) and four-eyes approvals
- Protected endpoints and per-severity confidence floors
- A kill switch and emergency stand-down
- An append-only audit trail
Deployment
Runs where your data lives
- Runs inside your infrastructure, on your own servers
- One-command agent install from signed packages
- A bastion relay for remote sites
- Offline bundles for air-gapped sites
- Built and supported in the Philippines
Good fit if you…
- Worry that ransomware could spread faster than your team can react
- Cannot read every alert or respond at night
- Want automated response, but only within limits you set and can audit
See Prowl in a 20-minute live demo
Talk to a Philippine security team that can test, monitor, respond and train. Start with one service and add more as you need them.
Unit 808, The Offix 2, Paranaque Integrated Terminal Exchange (PITX), #1 Kennedy Road, Barangay Tambo, Parañaque City, 1701 Metro Manila